Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/71694d9a-8a1f-478d-8d5f-c3d4c84ddea8/0dc2ca7e-4ac7-3488-b35a-d609510474c3.roa
File:                     0dc2ca7e-4ac7-3488-b35a-d609510474c3.roa (raw, json)
Hash identifier:          NuzbxisXOOHLB4bOynzS+/feLNjrkuCrq8gAzLJverc=
Subject key identifier:   8D:B0:86:31:1A:1E:B6:42:D4:05:9B:3B:DF:D6:A2:84:E7:60:26:DF
Certificate issuer:       /CN=71694d9a-8a1f-478d-8d5f-c3d4c84ddea8
Certificate serial:       010D0C9F4328584A8C70D1913512E1F07B2AA480
Authority key identifier: 2D:D7:F3:49:98:6C:58:6B:C7:BF:E0:C1:9D:BF:8F:BC:2E:E4:BC:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/71694d9a-8a1f-478d-8d5f-c3d4c84ddea8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/71694d9a-8a1f-478d-8d5f-c3d4c84ddea8/0dc2ca7e-4ac7-3488-b35a-d609510474c3.roa
Signing time:             Thu 17 Jul 2025 13:01:04 +0000
ROA not before:           Thu 17 Jul 2025 13:01:04 +0000
ROA not after:            Wed 15 Oct 2025 13:01:04 +0000
asID:                     401170
IP address blocks:        2602:f8bf::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/71694d9a-8a1f-478d-8d5f-c3d4c84ddea8/71694d9a-8a1f-478d-8d5f-c3d4c84ddea8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/71694d9a-8a1f-478d-8d5f-c3d4c84ddea8/71694d9a-8a1f-478d-8d5f-c3d4c84ddea8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/71694d9a-8a1f-478d-8d5f-c3d4c84ddea8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:8c:70:d1:91:35:12:e1:f0:7b:2a:a4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71694d9a-8a1f-478d-8d5f-c3d4c84ddea8
        Validity
            Not Before: Jul 17 13:01:04 2025 GMT
            Not After : Oct 15 13:01:04 2025 GMT
        Subject: CN=b731d2d0-997f-453f-9596-e311f69c182d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:1d:3b:c1:98:66:d9:6e:b9:60:a3:08:35:a4:
                    b7:62:26:b8:b4:64:c3:4b:8a:d5:eb:f5:71:59:ee:
                    9d:af:99:03:2c:e3:71:4f:0e:d3:14:00:da:ac:df:
                    39:c8:ca:f2:8b:ea:4e:6c:a3:e8:a0:46:ec:2a:97:
                    ed:9e:5a:77:00:a8:4b:2b:86:70:cf:81:c6:a9:d8:
                    a1:e0:4a:2c:6c:dc:28:25:4e:da:cc:0e:71:31:16:
                    69:8f:cf:71:7d:ae:af:d7:35:5c:fe:e3:9c:3d:47:
                    b8:1a:cf:aa:70:59:a0:a1:35:c3:88:62:39:e4:39:
                    16:15:fe:46:ee:08:29:6a:4e:ac:94:d0:29:2e:a3:
                    3c:0a:fe:33:aa:c8:53:58:2e:3b:61:83:7d:ab:ae:
                    6b:0d:0b:b1:2f:5f:89:3a:35:03:f7:61:4d:c3:60:
                    03:7f:7e:5e:b4:f9:78:04:fc:4b:50:87:6e:c9:d4:
                    f5:b9:f8:61:53:1d:9b:b7:42:95:c5:5f:8a:c4:d1:
                    ff:4e:75:bb:bb:5d:5b:ec:84:da:1d:fb:e9:36:7c:
                    bb:f0:bf:15:44:ef:dd:6e:01:d1:2f:d4:97:5a:62:
                    bb:e4:2d:11:2d:01:0b:a5:79:63:13:60:6e:dd:83:
                    c4:4c:f3:ee:a7:64:40:09:9d:b1:7f:28:84:37:96:
                    0f:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:B0:86:31:1A:1E:B6:42:D4:05:9B:3B:DF:D6:A2:84:E7:60:26:DF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/71694d9a-8a1f-478d-8d5f-c3d4c84ddea8/0dc2ca7e-4ac7-3488-b35a-d609510474c3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/71694d9a-8a1f-478d-8d5f-c3d4c84ddea8/71694d9a-8a1f-478d-8d5f-c3d4c84ddea8.crl

            X509v3 Authority Key Identifier:
                keyid:2D:D7:F3:49:98:6C:58:6B:C7:BF:E0:C1:9D:BF:8F:BC:2E:E4:BC:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/71694d9a-8a1f-478d-8d5f-c3d4c84ddea8.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f8bf::/64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:5e:e5:4e:2e:16:29:c3:43:c3:f0:f9:fc:18:43:29:58:69:
         ac:72:b5:95:9b:53:5b:33:4a:d1:31:63:cc:39:b0:4b:50:8f:
         55:98:d8:9b:04:a7:6c:9c:1b:9f:d1:de:c2:34:ab:3e:e7:43:
         9a:c8:11:6d:a0:46:9c:17:6a:31:73:e6:93:a2:be:d7:fe:29:
         35:a9:68:2d:86:c3:b7:a3:5b:c5:a9:05:e2:b3:58:d1:6e:ee:
         76:de:81:aa:aa:cb:42:ee:49:38:f8:ce:61:34:61:ef:d0:fe:
         d2:7e:6b:26:33:7a:f7:aa:d4:ed:ea:37:52:ea:83:bd:3c:2c:
         c3:60:a3:a4:0d:2b:44:1f:eb:c5:bd:92:30:05:2f:c5:ba:7e:
         4d:75:ce:3f:11:e0:04:81:ea:aa:6c:0f:83:9a:4d:66:c6:77:
         69:ad:45:9d:af:ab:a4:e8:ac:da:15:1d:11:2e:39:d3:15:f9:
         29:99:82:6d:5c:1f:1e:22:bf:a7:b6:70:e8:07:a6:17:17:96:
         df:d5:1f:f2:db:41:0d:8a:80:d1:ac:85:c4:51:32:bd:1a:76:
         5c:83:1a:74:61:37:40:cd:fd:02:2a:db:fb:26:85:37:84:df:
         89:7b:bd:f7:cf:29:df:f7:4b:d9:6a:29:bd:36:d0:61:1a:5d:
         16:b9:93:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 14:53:26 2025 by rpki-client